
$ rpki-client -vvf repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft
File: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft (raw, json)
Hash identifier: BU8qhUsEktG7Oz0plyzBCe56ueJcgmSqHyAUvr/tSyg=
Subject key identifier: 72:D8:35:DD:31:FD:4B:F7:37:E5:44:49:A7:85:03:7B:07:E8:17:F7
Authority key identifier: 3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B
Certificate issuer: /CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B
Certificate serial: 32286865F969E75C64EBDA154BF9A46FAFF724ED
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft
Manifest number: 0202
Signing time: Sat 28 Feb 2026 15:30:47 +0000
Manifest this update: Sat 28 Feb 2026 15:25:47 +0000
Manifest next update: Tue 03 Mar 2026 17:59:47 +0000
Files and hashes: 1: 3130332e35342e3137312e302f32342d3234203d3e20313431303731.roa (hash: A15JvoKxrrNNly8QbNKG17HNlGfUgFoFqcNw47K8k1o=)
2: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl (hash: eWFgT6d+2dXtGqSNRI0RYK+PH+Zuf0lQl1bRyBW67j8=)
3: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (hash: 4d1ijz/rU+DejuJXb/c4cK45ZvNx5vBw0rsE3pI0Nk8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl
rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 17:59:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:28:68:65:f9:69:e7:5c:64:eb:da:15:4b:f9:a4:6f:af:f7:24:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B
Validity
Not Before: Feb 28 15:25:47 2026 GMT
Not After : Mar 3 17:59:47 2026 GMT
Subject: CN=72D835DD31FD4BF737E54449A785037B07E817F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0a:39:5c:79:cb:49:9c:98:ed:b3:24:ff:d2:
28:95:38:8e:2d:4a:9b:2c:42:3a:89:a0:e1:e8:46:
91:19:d4:51:89:51:06:e5:b4:50:bf:ce:12:03:32:
a6:60:83:0f:f0:75:25:d4:aa:b1:cd:25:bc:7e:66:
66:fe:f9:24:c6:dc:c7:16:03:0d:e1:a5:06:79:d1:
5f:77:31:40:db:a7:8c:78:d2:4c:5b:2a:39:74:5a:
c2:9d:53:d9:fe:95:3b:77:15:b7:29:7d:5b:4e:a3:
f8:fb:d2:ac:7e:ce:9a:d5:72:b8:4f:bb:41:03:d4:
32:0c:e3:32:03:2e:98:7e:7f:98:4c:cb:a9:4c:a5:
9b:5d:cc:bd:87:52:1c:6a:e3:eb:ef:9b:a2:20:f7:
b6:14:40:ba:a6:82:d2:74:2c:bc:24:18:cc:38:50:
4d:0d:97:7b:64:c7:be:b3:2b:6f:bc:7c:d3:48:a8:
85:5f:e2:ff:3e:6f:6b:ab:00:7b:a6:7e:40:ba:aa:
19:81:50:0e:39:27:85:ce:ae:2d:aa:04:83:e2:d8:
99:e9:e0:32:7e:7d:e3:c9:25:67:9b:fe:8a:e8:40:
4f:13:e9:25:37:65:c3:67:7e:1d:94:08:a8:b3:62:
02:11:9a:98:a3:d4:90:cd:37:8c:a8:9c:67:c0:8b:
d6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D8:35:DD:31:FD:4B:F7:37:E5:44:49:A7:85:03:7B:07:E8:17:F7
X509v3 Authority Key Identifier:
keyid:3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d9:49:e3:d5:55:33:d4:cb:bc:38:2a:11:65:05:61:81:78:
9b:44:fd:f4:9a:d5:13:f4:2a:11:80:a0:d6:0d:90:d9:c5:5f:
18:6e:fe:cd:b6:88:20:f1:2f:fe:ae:09:89:26:6b:f7:52:e3:
88:8c:f7:55:c8:b1:49:b3:27:86:78:c9:bd:0a:73:56:0e:71:
b8:fa:5b:18:35:c0:ff:07:c8:a5:4c:13:15:b2:f3:d1:42:e0:
a8:cd:a1:21:7c:b4:c4:45:69:18:1c:ed:da:46:43:ed:7f:2b:
3d:96:01:e3:9e:e2:28:0a:dc:01:c7:84:d4:16:f2:a6:70:30:
fa:74:ce:43:04:14:9d:25:b5:95:1e:e5:9b:24:1a:49:5a:5f:
09:26:65:d8:82:63:89:a5:72:5f:fb:8a:77:79:06:9f:a3:71:
d6:b1:55:44:f9:08:3d:59:4e:92:a3:cb:0b:f1:2e:9f:f6:2a:
04:4d:ee:af:b9:cb:98:12:7b:2e:e0:e4:b9:4d:f8:42:df:48:
05:2d:59:9c:2b:5d:38:ff:cd:bb:88:3c:83:64:51:00:d8:d3:
79:5c:55:c8:e3:db:b6:d4:fb:22:54:8e:e8:88:89:81:a2:16:
0f:a5:73:69:f8:a4:08:69:47:37:b0:be:30:db:ef:0a:46:4e:
e0:4a:66:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:29 2026 by rpki-client